JPS6315344A - File managing system - Google Patents

Abstract

PURPOSE:To prevent data from being written accidentally on a file when a right to change a file processing right is attached, by setting the value of the file processing right by combining fundamental processing right in which no common part part exists in the content of right. CONSTITUTION:A file generating means 1 performs file generation 80 based on a file processing request 11, and the initial value setting 81 of the file processing right based on the fundamental processing right designated by the file processing request 11, or the combination of composite processing right, and outputs a file generation result 91 to a file processing request deciding means 6. A file processing right changing means 2 performs file processing right change 82 based on the fundamental file processing right designated by the file processing request 11, or the combination of the composite processing right, and outputs the file processing right changed result 92 to the file processing request deciding means 6. The file processing request deciding means 6 outputs a file processing right decided result 61 as a file processing right decided result 101, and outputs the file processing right changed result 92 as a file processed result 102.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a file management system, and particularly to a file management system that protects a file by using file processing rights for the file in an information processing system.

[Conventional technology]

Conventionally, in this type of file management system, the right to delete files and the right to change file processing rights are not separated in the basic processing rights that constitute file processing to protect files. The right to write to a file and the right to change file processing rights were not separated.

In addition, multiple rights were not separated among the basic processing rights that constitute the file processing rights, and there were common parts in the content of the rights among the basic processing rights.

[Problem that the invention seeks to solve]

In the conventional file management method described above, the right to delete files and the right to change file processing rights are not separated in the basic processing rights that constitute file processing rights, so the right to change file processing rights is not separated. The drawback is that it is not possible to prevent files from being deleted by mistake.

Furthermore, since the right to write to a file and the right to change file processing rights are not separated, there is a drawback that it is impossible to prevent erroneously writing to a file when there is a right to change file processing rights.

Furthermore, in addition to the basic processing rights that make up the file processing rights, multiple rights are not separated and there are common parts in the contents of the basic processing rights. Convenience for users to specify the value of file processing rights when changing the value of refile processing rights created by combining basic rights (compound processing rights (file creation (initial value setting of file processing rights)) When setting processing rights for a file consisting of multiple basic file processing rights to achieve The disadvantage is that there are cases where the

In view of the above-mentioned points, an object of the present invention is to prevent the content of a plurality of basic processing rights constituting a file processing right from having any common parts, so that when there is a right to change file processing rights, To provide a file management method that can prevent erroneous file deletion and writing and can set arbitrary complex processing rights that do not include unnecessary rights.

[Means for solving problems]

The file management method of the present invention includes a file creation means for creating a file and setting an initial value of file processing rights based on a combination of basic processing rights, and changing the value of the file processing rights based on the combination of basic processing rights. A file processing right changing means, a file processing execution means for executing file processing other than file creation and changing the file processing right value, and a file processing right reading means for reading the file processing right value of the file for which file processing is requested. Then, by referring to the basic processing rights that constitute the file processing rights read by this file processing rights successive means, it is determined whether the requested file processing is a file processing that is permitted for the requested file. a file processing right determining means for outputting a file processing right determining result as a file processing right determining result; and a file processing right determining means for determining whether the file processing right is the requested file processing based on the file processing right determining result. If the requested file processing is not allowed for the file, the file processing right determination result is output, and if the requested file processing is allowed for the requested file, the file creation means, the file processing The file processing request determining means has a file processing request determining means for causing one of the rights changing means and the file processing execution means to perform file processing and outputting the file processing rights determination result and the file processing result.

[Effect]

In the file management method of the present invention, the file creation means creates a file and sets an initial value of file processing rights based on a combination of basic processing rights, and the file processing rights changing means creates file processing rights based on a combination of basic processing rights. , the file processing execution means executes file processing other than file creation and changing the file processing right value, and the file processing right succession means changes the file processing value of the file for which file processing is requested. The file processing determination means outputs as a file processing determination result whether the requested file processing is allowed for the requested file, and the file processing request determination means determines whether the requested file processing is a file processing that is permitted for the requested file. Outputs the judgment result and file processing result on file processing based on the judgment result.

〔Example〕

Next, the present invention will be explained in detail with reference to the drawings.

FIG. 1 is a block diagram showing an embodiment of the file management method of the present invention. The file management method of this embodiment is such that when a file creation request 71 is input, a file creation means 1 performs file creation 80, sets initial values 81 for file processing for the created file, and outputs a file creation result 91. , when a file processing change request 72 is input, a file processing change 82 is performed and a file processing change result 92 is output.When a file processing execution request 73 is input, a file processing change 83 is performed and the file processing is performed. A file processing execution unit 3 that outputs an execution result 93; a file processing reading unit 4 that performs a file processing read 41 when a file processing read request 31 is manually issued and outputs a file processing read result 51; and a file processing reading unit 4 that outputs a file processing read result 51. A file processing determination means 5 that outputs as a file processing determination result 61 whether or not the requested file processing is permitted for the requested file when the request 21 is input, and the file processing request 11
When inputting , the file processing judgment means 5 makes a file processing judgment, outputs the same file processing judgment result 61 as the file processing judgment result 101, and issues a file processing request based on the file processing judgment result 61. 1
If 1 is a file process that is allowed for the requested file, a file creation request 71 is made based on the file processing request 11. Either the file processing change request 72 or the file processing execution request 73 is output, and the file creation result 91. File processing result 10 is either file processing change result 92 or file processing execution result 93.
2, and a file processing request determining means 6 for outputting the file processing request.

Referring to FIG. 2, in the file management system of this embodiment, basic rights related to file processing (fundamental rights related to file processing that have no common parts in the contents of the rights that constitute file processing), especially file processing The right to modify the file is separated from the right to delete the file, and the right to modify the file processing is separated from the right to write to the file. right, sha
V e control, update right, append right, r
There is an ead right and an execute right.

Each value has an independent effect on the file processing value, and there are 7 types of basic processing, so 2X2X2
There are X2X2X2X2=128 types of file processing values.

The value for file processing is 1, which indicates the presence or absence of modify rights.
character (modify ['M' if present, 'J' if absent), one character indicating the presence or absence of deleteli (
"D" if you have the delete right, r - if you don't have the right to delete
J), 5 One character indicating the presence or absence of have right (rsJ if there is shave right, r-J if not), update
One character indicating the presence or absence of the e right (“U” if there is an update right, r-J if there is none), one character indicating the presence or absence of the append right (rAJ if there is an append right, “-J” if there is not) , one character (r
"R" if you have e a d rights, "-" if you do not have them.
) and one character (exe
It is expressed by seven characters arranged in this order: rEj when the right to cut exists, and "-" when there is no right to cut.

For example, if you have modify rights but no delete rights, 5
There is havelli and there is no update Jl and there is no appe.
The file processing value when there is nd right and no read right (excutelli is "M-S-A
−E Expressed as J.

When the value of file processing rights is rM----R-J, you have the right to change the value of file processing rights, but you are prevented from accidentally deleting files unless you change the value of file processing rights. This will prevent you from accidentally writing to a file unless you change the file processing privilege value. This is possible because the right to change file processing rights is separated from the right to delete files, and the right to change file processing rights is separated from the right to write to files.

In addition, when the value of the file processing right is "rM-----R-", in order to delete the file, change the file processing right to the state with the delete right, then delete the file, and then delete the file. In order to write, change the file processing authority to the state with updatell, and then write to the file.

For files that do not require the above protection, you can change the file processing privilege by setting the file processing privilege value to something like "rMDS'UARE" to enable deletion and writing from the beginning. You can immediately delete or write to a file without having to do so.

Referring to FIG. 3, examples of complex processing rights made up of the basic processing rights shown in FIG.
odread4I, modexell, writeela
, output rights, and readex rights.

Basic processing rights have no common content in their rights, so
Any complex processing right that does not include unnecessary rights can be set, and all the basic processing rights that make up the complex processing right have meaning.

Referring to FIG. 4, examples of setting file processing rights can be shown for the five cases in the figure, along with respective file processing rights values.

When setting file processing rights, there is always some difference in file processing unless the value of file processing rights is completely defeated, and in this sense, no matter what value the file processing rights are set to, file processing It can be said that the presence or absence of each basic processing right that makes up the right value has a meaning.

Next, the operation of the file management system of this embodiment configured as described above will be explained.

First, use requests for file processing corresponding to basic processing rights for a certain file (processing to change file processing rights corresponding to modify rights, processing to delete files corresponding to delete rights, etc.) or file creation processing. A file processing request 11 from a person is input to the file processing request determining means 6.

The file processing request determining means 6 determines the file processing request 11.
A file processing right determination request 21 based on the above is output to the file processing right determining means 5.

The file processing right determining means 5 outputs a file processing read request 31 to the file processing reading means 4 regarding the file for which file processing is requested.

The file processing reading means 4 performs file processing 4ft continuation 41 of the file for which file processing is requested.

At this time, if the file requested by file processing request 11 does not exist, only file creation processing is possible and all other file processing is impossible. It is output to the processing right determining means 5.

If the requested file exists, the value of the file processing right obtained in File Processing Read 41 is added to indicate that file creation processing is not possible, and file processing is performed as File Processing Read Result 51. Rights determination means 5
is output to.

The file processing right determination means 5 compares the file processing right determination request 21 and the file processing 11 successive result 51, and the file processing requested by the file processing request 11 is permitted for the file requested by the file processing request 11. It outputs to the file processing request determining means 6 as a file processing right determination result 61 whether or not the file processing is currently being performed.

When the file processing right determination result 61 indicates that the file processing requested by the file processing request 11 is not permitted for the requested file, the file processing request determining means 6 notifies the file processing request 11 to that effect. It is output as the file processing authority determination result 101 and the file processing result 102 is not output (because the file processing requested by the file processing request 11 cannot be performed, the file processing result 102 is not output.
2 does not exist).

The file processing right determination result 61 indicates that the file processing requested by the file processing request 11 is permitted for the requested file, and the file processing requested by the file processing request 11 is permitted. When it is a file creation process, the file processing request determination means 6 outputs a file creation request 71 to the file creation means 1.

The file creation means 1 performs file creation 80 based on the file processing request 11 and initial value setting 81 of file processing rights based on a combination of basic processing rights or complex processing rights specified in the file processing request 11 to process the file. A file creation result 91 is output to the request determination means 6.

The file processing request determination means 6 outputs the file processing right determination result 61 as the file processing right determination result 101,
The file creation result 91 is output as a file processing result 102 to provide information to the user.

The file processing right determination result 61 indicates that the file processing requested by the file processing request 11 is permitted for the requested file, and the file processing requested by the file processing request 11 is permitted. When it is a file processing right changing process (processing corresponding to the modify right of the basic processing barrel), the file processing request determining means 6 outputs a file processing bath changing request 72 to the file processing right changing means 2.

The file processing right changing means 2 performs file processing right changing 82 to change the basic processing right configuration of the requested file based on the combination of basic processing rights or complex processing rights specified in the file processing request 11. A file processing change result 92 is output to the processing request determining means 6.

The file processing request determination means 6 outputs the file processing right determination result 61 as the file processing right determination result 101,
File processing authority change result 92 File processing result 102
output as and give information to the user.

The file processing right determination result 61 indicates that the file processing requested by the file processing request 11 is permitted for the requested file, and the file processing requested by the file processing request 11 is permitted. When neither file creation processing nor file processing right change processing is performed (processing corresponding to non-zero rights other than modiry rights), the file processing request determination means 6 outputs a file processing execution request 73 to the file processing execution means 3. do.

The file processing execution means 3 performs file processing 83 based on the file processing request 11 and outputs a file processing execution result 93 to the file processing request determination means 6.

The file processing request determination means 6 outputs the file processing right determination result 61 as the file processing right determination result 101,
The file processing execution result 93 is output as a file processing result 102 to provide information to the user.

Note that FIGS. 5 to 12 show examples of uses of the file processing right values set by the basic processing rights of the file management system of this embodiment.

〔Effect of the invention〕

As explained above, the present invention sets the value of the file processing right by combining basic processing rights that have no common parts in the content of the rights, so that when there is a right to change the file processing right, This has the effect of preventing file deletion and preventing accidental writing to a file when the user has the right to change file processing rights.

Furthermore, since there is no common part in the contents of the rights among all the basic processing rights, there is an effect that an arbitrary composite processing right that does not include unnecessary rights can be set.

[Brief explanation of drawings]

Figure 1 is a block diagram showing an embodiment of the present invention, Figure 2 is a diagram showing basic processing rights for the files in Figure 1, and Figure 3 is a complex diagram consisting of the basic processing rights shown in Figure 2. Figure 4 shows an example of setting file processing rights using the basic processing rights shown in Figure 2. Figures 5 to 12 show examples of file processing rights set using the basic processing rights shown in Figure 2. FIG. 4 is a diagram illustrating an example of the usage of the file processing right value. In the figure, l... file creation means, 2... file processing right changing means, 3... file processing execution means, 4... file processing output means, 5... file processing right determining means. , 6... File processing request determination means.

Claims (1)

[Claims] File creation means for creating a file and setting an initial value of file processing rights based on a combination of basic processing rights; and file processing for changing the value of file processing rights based on the combination of basic processing rights. a file processing execution means for executing file processing other than file creation and changing the file processing right value; and a file processing right reading means for reading the file processing right value of the file for which file processing is requested; Referring to the basic processing rights that constitute the file processing rights read by this file processing rights reading means, the file determines whether the requested file processing is a file processing that is permitted for the requested file. a file processing right determining means for outputting a processing right determination result; and a file processing right determining means for causing the file processing right determining means to perform a file processing determination, so that the requested file processing is performed on the requested file based on the file processing right determination result. If the requested file processing is not permitted, the file processing right determination result is output; and if the requested file processing is permitted for the requested file, the file creation means; the file processing right changing means; and file processing request determining means for causing one of the file processing execution means to perform file processing and outputting the file processing right determination result and the file processing result.